US12175236B2 - Operation management device and operation management method - Google Patents

Operation management device and operation management method Download PDF

Info

Publication number
US12175236B2
US12175236B2 US18/153,551 US202318153551A US12175236B2 US 12175236 B2 US12175236 B2 US 12175236B2 US 202318153551 A US202318153551 A US 202318153551A US 12175236 B2 US12175236 B2 US 12175236B2
Authority
US
United States
Prior art keywords
electronic control
activation
update
unit
control device
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active, expires
Application number
US18/153,551
Other versions
US20230259353A1 (en
Inventor
Takumi Nomura
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Honda Motor Co Ltd
Original Assignee
Honda Motor Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Honda Motor Co Ltd filed Critical Honda Motor Co Ltd
Assigned to HONDA MOTOR CO., LTD. reassignment HONDA MOTOR CO., LTD. ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: NOMURA, TAKUMI
Publication of US20230259353A1 publication Critical patent/US20230259353A1/en
Application granted granted Critical
Publication of US12175236B2 publication Critical patent/US12175236B2/en
Active legal-status Critical Current
Adjusted expiration legal-status Critical

Links

Images

Classifications

    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B23/00—Testing or monitoring of control systems or parts thereof
    • G05B23/02—Electric testing or monitoring
    • G05B23/0205—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults
    • G05B23/0208—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults characterized by the configuration of the monitoring system
    • G05B23/0213—Modular or universal configuration of the monitoring system, e.g. monitoring system having modules that may be combined to build monitoring program; monitoring system that can be applied to legacy systems; adaptable monitoring system; using different communication protocols
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/60—Software deployment
    • G06F8/65—Updates
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60W—CONJOINT CONTROL OF VEHICLE SUB-UNITS OF DIFFERENT TYPE OR DIFFERENT FUNCTION; CONTROL SYSTEMS SPECIALLY ADAPTED FOR HYBRID VEHICLES; ROAD VEHICLE DRIVE CONTROL SYSTEMS FOR PURPOSES NOT RELATED TO THE CONTROL OF A PARTICULAR SUB-UNIT
    • B60W50/00—Details of control systems for road vehicle drive control not related to the control of a particular sub-unit, e.g. process diagnostic or vehicle driver interfaces
    • B60W50/02—Ensuring safety in case of control system failures, e.g. by diagnosing, circumventing or fixing failures
    • B60W50/0205—Diagnosing or detecting failures; Failure detection models
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60W—CONJOINT CONTROL OF VEHICLE SUB-UNITS OF DIFFERENT TYPE OR DIFFERENT FUNCTION; CONTROL SYSTEMS SPECIALLY ADAPTED FOR HYBRID VEHICLES; ROAD VEHICLE DRIVE CONTROL SYSTEMS FOR PURPOSES NOT RELATED TO THE CONTROL OF A PARTICULAR SUB-UNIT
    • B60W2556/00—Input parameters relating to data
    • B60W2556/45—External transmission of data to or from the vehicle
    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00—Program-control systems
    • G05B2219/20—Pc systems
    • G05B2219/24—Pc safety
    • G05B2219/24065—Real time diagnostics

Definitions

  • the present invention relates to an operation management device and an operation management method for managing operation of electronic control devices installed on a vehicle.
  • WO 2021039795 discloses a vehicle electronic control system in which an in-vehicle master device delivers updated data received from an external device to an in-vehicle electronic control device and instructs the electronic control device to write the updated data to a memory.
  • a non-volatile memory of the electronic control device stores configuration information that is set value information including various parameters to be used for control.
  • the master device acquires old configuration information from a rewrite target electronic control device, and then instructs the rewrite target electronic control device to write back a new configuration information obtained by processing the acquired old configuration information while or after the rewrite target electronic control device rewrites the program.
  • one configuration is such that all the electronic control devices are activated according to a procedure normally performed when the vehicle is powered on, and then the electronic control device to be updated receives updated data and is instructed to write the data. This involves a risk to activate even an electronic control device that does not need to be activated, resulting in wasteful power consumption.
  • another configuration is such that only a part of electronic control devices are activated without following normal procedures. This disadvantageously causes the electronic control devices that have not been activated to have operational abnormality detected when all the electronic control devices are subjected to the operation diagnosis normally performed at the activation of the electronic control devices s.
  • An aspect of the present invention is an operation management device for managing operation of a plurality of electronic control devices installed on a vehicle, the operation management device including: an update management unit configured to: receive a download instruction to download updated data from an external device outside the vehicle; and deliver the received updated data to an electronic control device and instruct the electronic control device to write the updated data, the updated data including an updated program for the electronic control device, the electronic control device being at least one of the electronic control devices, the electronic control device being a target device for downloading the updated data; and a failure diagnosis unit configured to execute failure diagnosis for the electronic control devices, wherein when the update management unit instructs any of the electronic control devices to write the updated data, the update management unit prohibits the failure diagnosis unit from executing the failure diagnosis.
  • each of the plurality of electronic control devices is connected to the operation management device either directly through a communication transmission line to be able to communicate with each other or indirectly through the communication transmission line and at least one of the electronic control devices other than the electronic control device to be able to communicate with each other
  • the operation management device further includes: an activation management unit configured to manage an activation configuration, the activation configuration being information indicating an activation order of the plurality of electronic control devices; and an activation unit configured to activate the electronic control devices, wherein the update management unit prohibits execution of diagnostic operation and then notifies the target device to the activation management unit based on the download instruction, the activation management unit notifies an electronic control device and an update activation configuration to the activation unit, the electronic control device being at least one of the electronic control devices, the electronic control device needing to be activated to establish communication between the update management unit and the target device, the update activation configuration being the activation configuration indicating an activation order, and the activation unit activates the electronic control device needing to be activated
  • the failure diagnosis unit executes failure diagnosis for the electronic control device indicated in the update activation configuration after the activation unit activates the electronic control device according to the update activation configuration.
  • the plurality of electronic control devices, the operation management device, and the communication transmission line configure a communication network
  • the communication network includes at least one transmission line switch that switches connection in the communication transmission line
  • the activation management unit manages a network configuration that indicates a state to be set for the transmission line switch in the communication network
  • the activation management unit notifies an update network configuration to the activation unit, the update network configuration being the network configuration for establishing communication between the update management unit and the target device
  • the activation unit switches the transmission line switch according to the update network configuration, and then activates the electronic control device needing to be activated, according to the update activation configuration.
  • the update management unit prohibits the failure diagnosis unit from executing the failure diagnosis
  • the activation management unit notifies, to the activation unit, the network configuration used before notifying the update network configuration to the activation unit, and the activation unit switches the transmission line switch according to the network configuration notified from the activation management unit.
  • Yet another aspect of the present invention is an operation management method to be performed by a computer of an operation management device, the operation management device managing operation of a plurality of electronic control devices installed on a vehicle, the method including: a step of receiving a download instruction to download updated data from an external device outside the vehicle, the updated data including an updated program for an electronic control device, the electronic control device being at least one of the electronic control devices; a step of prohibiting execution of failure diagnosis for the electronic control devices; and a step of delivering the received updated data to the electronic control device and instructing the electronic control device to write the updated data, the electronic control device being a target device for downloading the updated data.
  • FIG. 1 is a diagram showing a configuration of an in-vehicle communication network including an operation management device according to an embodiment of the present invention
  • FIG. 2 is a diagram showing a configuration of the operation management device.
  • FIG. 1 is a diagram showing a configuration of a communication network 3 installed on a vehicle 1 , including an operation management device 2 according to one embodiment of the present invention.
  • the communication network 3 includes a plurality of electronic control devices 4 a , 4 b , 4 c , 4 d , 4 e , 4 f , 4 g , 4 h , and 4 i , and a transmission line switch 6 (also referred to as a transmission line SW 6 ) in addition to the operation management device 2 .
  • a transmission line switch 6 also referred to as a transmission line SW 6
  • the electronic control devices 4 a , 4 b , 4 c , 4 d , 4 e , 4 f , 4 g , 4 h , and 4 i are collectively referred to as the electronic control devices 4 as well.
  • the transmission line switch 6 switches connection in a communication transmission line 5 according to instructions from the operation management device 2 .
  • the communication network 3 also includes communication transmission lines 5 a , 5 b , 5 c , 5 d , 5 e , 5 f , 5 g , 5 h , 5 j , 5 k , and 5 m .
  • the communication transmission lines 5 a , 5 b , 5 c , 5 d , 5 e , 5 f , 5 g , 5 h , 5 j , 5 k , and 5 m are collectively referred to as a communication transmission line 5 .
  • each of the plurality of electronic control devices 4 is directly connected to the operation management device via the communication transmission line 5 to be able to communicate with each other, or each of the devices is indirectly connected to the operation management device 2 via the communication transmission line 5 and any of the other electronic control devices 4 to be able to communicate with each other.
  • the operation management device 2 manages the operation of the plurality of electronic control devices 4 installed on the vehicle 1 .
  • FIG. 2 is a diagram showing the configuration of the operation management device 2 .
  • the operation management device 2 includes a processor 10 , a memory 11 , and a communicator 12 .
  • the memory 11 is composed of, for example, a volatile and/or non-volatile semiconductor memory.
  • the communicator 12 is a transceiver (transmitter/receiver, circuit) for the operation management device 2 to communicate with the electronic control devices 4 and the transmission line switch 6 via the communication transmission line 5 .
  • the processor 10 is, for example, a computer including a central processing unit (CPU), and the like.
  • the processor 10 may have a configuration including a read only memory (ROM) in which a program is written, a random access memory (RAM) for temporarily storing data, and the like.
  • the processor 10 includes an update management unit 13 , a failure diagnosis unit 14 , an activation management unit 15 , and an activation unit 16 , as functional elements or functional units.
  • the processor 10 which is a computer, executing a management program 17 stored in the memory 11 .
  • the management program 17 can be stored in any computer-readable storage medium.
  • all or part of the functional elements of the processor 10 may be configured with hardware including one or more electronic circuit components.
  • the update management unit 13 receives a download instruction to download updated data, which includes an updated program for at least one electronic control device 4 , from an external device (e.g. server) outside the vehicle 1 .
  • the update management unit 13 turns on the power of the vehicle 1 , delivers the received updated data to the electronic control device 4 that is a target device for downloading the updated data, and instructs the device 4 to write the updated data.
  • the update management unit 13 when the update management unit 13 instructs any of the electronic control devices 4 to write updated data, the update management unit 13 prohibits the failure diagnosis unit 14 , which will be described later, from executing failure diagnosis. This makes it possible to prevent the electronic control devices 4 from detecting unnecessary operational abnormality and from consuming unnecessary power in downloading the updated data to the electronic control device 4 , thereby leading to the efficient downloading.
  • the update management unit 13 prohibits execution of the diagnostic operation, and then notifies target information indicating the download target device to the activation management unit 15 , which will be described later, based on the download instruction.
  • the update management unit 13 When the writing of the updated data ends in the electronic control device 4 that is the target device, in other words, when the update management unit 13 receives an end notification (to be described later) from the electronic control device 4 that is the target device, the update management unit 13 prohibits the failure diagnosis unit 14 from executing failure diagnosis.
  • the failure diagnosis unit 14 executes failure diagnosis for the electronic control devices 4 when the power of the vehicle 1 is turned on or off.
  • the failure diagnosis unit 14 does not execute failure diagnosis for the electronic control devices 4 when the failure diagnosis unit 14 is prohibited from executing failure diagnosis by the update management unit 13 .
  • the failure diagnosis unit 14 executes failure diagnosis for the electronic control devices 4 , which are indicated in the update activation configuration, after the activation.
  • the electronic control device 4 that is the target device writes the updated data after the execution of the failure diagnosis.
  • the electronic control device 4 that is the target device transmits an end notification to the operation management device 2 when the device 4 ends the writing of the updated data.
  • the failure diagnosis unit 14 When the communicator 12 receives the end notification from the electronic control device 4 that is the target device, in a state in which the failure diagnosis unit 14 is prohibited from executing the failure diagnosis by the update management unit 13 , the failure diagnosis unit 14 does not executes failure diagnosis for the electronic control devices 4 .
  • the failure diagnosis unit 14 executes the failure diagnosis for the electronic control devices 4 according to a normal (e.g. default) sequence and then turns off the power of the vehicle 1 .
  • the activation management unit 15 manages a network configuration that indicates a state to be set for the transmission line switch 6 in the communication network 3 . Based on the target information notified from the update management unit 13 , the activation management unit 15 notifies, to the activation unit 16 , an update network configuration that is a network configuration for establishing communication between the update management unit 13 and the target device. This allows the activation management unit 15 , with the update network configuration, to inform the activation unit 16 of a state of the transmission line switch 6 that can most efficiently establish communication between the update management unit 13 and the target device in downloading updated data to the electronic control device 4 .
  • the “state of the transmission line switch 6 that can most efficiently establish communication between the update management unit 13 and the target device” may be, for example, such a state of the transmission line switch 6 that minimizes the number of other electronic control devices 4 through which updated data passes from the operation management device 2 to the electronic control device 4 that is the target device.
  • the update network configuration can specify the communication transmission lines 5 a and 5 g to be connected when the updated data is downloaded with the electronic control device 4 e as the target device.
  • the updated data can start from the operation management device 2 and reach the electronic control device 4 e that is the target device, without passing through other electronic control devices 4 .
  • the activation management unit 15 manages the activation configuration, which is information indicating the activation order of the plurality of electronic control devices 4 .
  • the activation management unit 15 based on the target information notified from the update management unit 13 , the activation management unit 15 refers to the update network configuration, and notifies, to the activation unit 16 , the electronic control device 4 needing to be activated to establish communication between the update management unit 13 and the target device, and the update activation configuration, which is the activation configuration indicating the order of activation of those electronic control devices 4 .
  • the activation unit 16 activates no unnecessary electronic control device 4 , and therefore, generates no unnecessary power consumption. This makes it possible to efficiently activate the electronic control device 4 necessary for delivering updated data to the electronic control device 4 that is the target device.
  • the activation management unit 15 When the writing of the updated data ends in the electronic control device 4 that is the target device, in other words, when the activation management unit 15 receives the end notification from the electronic control device 4 that is the target device, the activation management unit 15 notifies, to the activation unit, the network configuration used before notifying the update network configuration to the activation unit 16 .
  • the activation unit 16 activates the electronic control devices 4 .
  • the activation unit 16 switches the transmission line switch 6 according to the update network configuration notified from the activation management unit 15 , and then sequentially activates the electronic control devices 4 that need to be activated according to the update activation configuration.
  • the activation unit 16 When the activation unit 16 completes activation of all the electronic control devices 4 that need to be activated, the activation unit 16 notifies this completion to the failure diagnosis unit 14 .
  • the activation unit 16 When the writing of the updated data ends in the electronic control device 4 that is the target device, in other words, when the activation unit 16 receives the end notification from the electronic control device 4 that is the target device, the activation unit 16 switches the transmission line switch 6 according to the network configuration notified from the activation management unit 15 thereafter. The activation unit 16 also activates all the electronic control devices 4 . The activation unit 16 then transmits a switching completion notification to the failure diagnosis unit 14 .
  • the activation unit 16 when the activation unit 16 switches the transmission line switch 6 to change the network configuration of the communication network 3 to a state different from the normal state in downloading the updated data, the activation unit 16 can restore the configuration to the original network configuration when the vehicle 1 is powered off. Therefore, when the vehicle 1 is powered off, the failure diagnosis unit 14 can perform failure diagnosis according to a normal sequence. As described above, the activation unit 16 restores the configuration to the previous network configuration when the vehicle 1 is powered off. This makes it possible to activate the electronic control devices 4 according to the normal activation sequence in the vehicle 1 when the vehicle 1 is powered on next time, and to activate the vehicle 1 with responsiveness maintained.
  • FIG. 3 is a flowchart showing the procedure of processing in the operation management device 2 .
  • the processing in FIG. 3 is repeatedly executed.
  • the update management unit 13 determines whether an updated data download instruction has been received from an external device outside the vehicle 1 (S 100 ). If the download instruction has not been received (S 100 , NO), the update management unit 13 returns to step 100 , repeats the processing, and waits for the download instruction to be received.
  • the update management unit 13 prohibits the failure diagnosis unit 14 from executing failure diagnosis for the electronic control devices 4 (S 102 ), and then turns on the power of the vehicle 1 (S 104 ).
  • the update management unit 13 also notifies, to the activation management unit 15 , target information indicating the electronic control device 4 that is the target device for downloading the updated data. Based on the target information, the activation management unit 15 notifies, to the activation unit 16 , the update network configuration and the update activation configuration for establishing communication between the update management unit 13 and the target device (S 106 ).
  • the activation unit 16 switches the transmission line switch 6 based on the update network configuration (S 108 ), and then sequentially activates the electronic control devices 4 based on the update activation configuration (S 110 ). In parallel with the executing the activation, the activation unit 16 passes the update activation configuration to the failure diagnosis unit. Subsequently, the failure diagnosis unit 14 executes failure diagnosis for the electronic control device 4 indicated in the update activation configuration (S 112 ).
  • the update management unit 13 delivers the received updated data to the electronic control device 4 that is the target device for downloading the updated data, and instructs the device 4 to write the updated data (S 114 ).
  • the update management unit 13 also determines whether writing of the updated data has been completed in the electronic control device 4 that is the target device (S 116 ). If the writing of the updated data has not been completed (S 116 , NO), the update management unit 13 repeats the processing of step S 116 and waits for the writing of the updated data to be completed.
  • the update management unit 13 prohibits the failure diagnosis unit 14 from executing failure diagnosis (S 118 ).
  • the activation management unit 15 also notifies, to the activation unit 16 , the previous network configuration used before notifying the update network configuration to the activation unit 16 (S 120 ).
  • the activation unit 16 switches the transmission line switch 6 according to the previous network configuration notified from the activation management unit 15 (S 122 ).
  • the failure diagnosis unit 14 executes failure diagnosis for the electronic control devices 4 according to a normal sequence (S 124 ), and then turns off the power of the vehicle 1 (S 126 ), ending this processing.
  • An operation management device for managing operation of a plurality of electronic control devices installed on a vehicle, the operation management device including: an update management unit configured to: receive a download instruction to download updated data from an external device outside the vehicle; and deliver the received updated data to an electronic control device and instruct the electronic control device to write the updated data, the updated data including an updated program for the electronic control device, the electronic control device being at least one of the electronic control devices, the electronic control device being a target device for downloading the updated data; and a failure diagnosis unit configured to execute failure diagnosis for the electronic control devices, wherein when the update management unit instructs any of the electronic control devices to write the updated data, the update management unit prohibits the failure diagnosis unit from executing the failure diagnosis.
  • the operation management device of configuration 1 makes it possible to prevent detection of unnecessary operational abnormality in the electronic control device to prevent generation of unnecessary power consumption in downloading updated data to the electronic control device, thereby leading to efficient downloading.
  • (Configuration 2) The operation management device according to configuration 1, each of the plurality of electronic control devices being connected to the operation management device either directly through a communication transmission line to be able to communicate with each other or indirectly through the communication transmission line and at least one of the electronic control devices other than the electronic control device to be able to communicate with each other, the operation management device further including: an activation management unit configured to manage an activation configuration, the activation configuration being information indicating an activation order of the plurality of electronic control devices; and an activation unit configured to activate the electronic control devices, wherein the update management unit prohibits execution of diagnostic operation and then notifies the target device to the activation management unit based on the download instruction, the activation management unit notifies an electronic control device and an update activation configuration to the activation unit, the electronic control device being at least one of the electronic control devices, the electronic control device needing to be activated to establish communication between the update management unit and the target device, the update activation configuration being the activation configuration indicating an activation order, and the activation unit activates the electronic control device needing to
  • the operation management device of configuration 2 allows the activation unit to activate no unnecessary electronic control devices, therefore to generate no unnecessary power consumption, and to efficiently activate the electronic control device necessary for delivering updated data to the electronic control device that is the target device.
  • the operation management device of configuration 3 allows the failure diagnosis unit to execute failure diagnosis for the electronic control device that has been actually activated, thereby preventing detection of unnecessary operational abnormality and generation of unnecessary power consumption.
  • (Configuration 4) The operation management device according to configuration 3, wherein the plurality of electronic control devices, the operation management device, and the communication transmission line configure a communication network, and the communication network includes at least one transmission line switch that switches connection in the communication transmission line, the activation management unit manages a network configuration that indicates a state to be set for the transmission line switch in the communication network, the activation management unit notifies an update network configuration to the activation unit, the update network configuration being the network configuration for establishing communication between the update management unit and the target device, and the activation unit switches the transmission line switch according to the update network configuration, and then activates the electronic control device needing to be activated, according to the update activation configuration.
  • the operation management device of configuration 4 allows the activation management unit to cause the activation unit to implement, for example, the state of the transmission line switch 6 in which the update network configuration can establish communication between the update management unit 13 and the target device most efficiently, thereby executing download further efficiently.
  • the operation management device of configuration 5 restores the configuration to the previous network configuration when the vehicle 1 is powered off. This makes it possible to activate the electronic control devices 4 according to a normal activation sequence in the vehicle 1 when the vehicle 1 is powered on next time and to activate the vehicle 1 with the responsiveness maintained.
  • the operation management method of configuration 6 makes it possible to prevent detection of unnecessary operational abnormality in the electronic control device to prevent generation of unnecessary power consumption in downloading updated data to the electronic control device, thereby leading to efficient downloading.

Landscapes

  • Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Automation & Control Theory (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Computer Security & Cryptography (AREA)
  • Mechanical Engineering (AREA)
  • Transportation (AREA)
  • Human Computer Interaction (AREA)
  • Information Transfer Between Computers (AREA)
  • Stored Programmes (AREA)

Abstract

An operation management device for managing operation of a plurality of electronic control devices installed on a vehicle includes: an update management unit configured to: receive a download instruction to download updated data from an external device; and deliver the received updated data to an electronic control device and instruct the electronic control device to write the updated data, the updated data including an updated program for the electronic control device, the electronic control device being at least one of the electronic control devices, the electronic control device being a target device for downloading the updated data; and a failure diagnosis unit configured to execute failure diagnosis for the electronic control devices, wherein when the update management unit instructs any of the electronic control devices to write the updated data, the update management unit prohibits the failure diagnosis unit from executing the failure diagnosis.

Description

INCORPORATION BY REFERENCE
The present application claims priority under 35 U.S.C. § 119 to Japanese Patent Application No. 2022-021277 filed on Feb. 15, 2022. The content of the application is incorporated herein by reference in its entirety.
BACKGROUND OF THE INVENTION Field of the Invention
The present invention relates to an operation management device and an operation management method for managing operation of electronic control devices installed on a vehicle.
Description of the Related Art
International Publication No. WO 2021039795 discloses a vehicle electronic control system in which an in-vehicle master device delivers updated data received from an external device to an in-vehicle electronic control device and instructs the electronic control device to write the updated data to a memory. In this vehicle electronic control system, a non-volatile memory of the electronic control device stores configuration information that is set value information including various parameters to be used for control. The master device acquires old configuration information from a rewrite target electronic control device, and then instructs the rewrite target electronic control device to write back a new configuration information obtained by processing the acquired old configuration information while or after the rewrite target electronic control device rewrites the program.
In downloading updated data such as an updated program from an external device to an in-vehicle electronic control device, one configuration is such that all the electronic control devices are activated according to a procedure normally performed when the vehicle is powered on, and then the electronic control device to be updated receives updated data and is instructed to write the data. This involves a risk to activate even an electronic control device that does not need to be activated, resulting in wasteful power consumption. In contrast, another configuration is such that only a part of electronic control devices are activated without following normal procedures. This disadvantageously causes the electronic control devices that have not been activated to have operational abnormality detected when all the electronic control devices are subjected to the operation diagnosis normally performed at the activation of the electronic control devices s.
It is an object of the present invention to prevent generation of unnecessary power consumption and detection of unnecessary operational abnormality of an in-vehicle electronic control device in download of updated data to the electronic control device so that the download can be performed efficiently.
SUMMARY OF THE INVENTION
An aspect of the present invention is an operation management device for managing operation of a plurality of electronic control devices installed on a vehicle, the operation management device including: an update management unit configured to: receive a download instruction to download updated data from an external device outside the vehicle; and deliver the received updated data to an electronic control device and instruct the electronic control device to write the updated data, the updated data including an updated program for the electronic control device, the electronic control device being at least one of the electronic control devices, the electronic control device being a target device for downloading the updated data; and a failure diagnosis unit configured to execute failure diagnosis for the electronic control devices, wherein when the update management unit instructs any of the electronic control devices to write the updated data, the update management unit prohibits the failure diagnosis unit from executing the failure diagnosis.
According to another aspect of the present invention, each of the plurality of electronic control devices is connected to the operation management device either directly through a communication transmission line to be able to communicate with each other or indirectly through the communication transmission line and at least one of the electronic control devices other than the electronic control device to be able to communicate with each other, and the operation management device further includes: an activation management unit configured to manage an activation configuration, the activation configuration being information indicating an activation order of the plurality of electronic control devices; and an activation unit configured to activate the electronic control devices, wherein the update management unit prohibits execution of diagnostic operation and then notifies the target device to the activation management unit based on the download instruction, the activation management unit notifies an electronic control device and an update activation configuration to the activation unit, the electronic control device being at least one of the electronic control devices, the electronic control device needing to be activated to establish communication between the update management unit and the target device, the update activation configuration being the activation configuration indicating an activation order, and the activation unit activates the electronic control device needing to be activated, according to the update activation configuration.
According to yet another aspect of the present invention, the failure diagnosis unit executes failure diagnosis for the electronic control device indicated in the update activation configuration after the activation unit activates the electronic control device according to the update activation configuration.
According to yet another aspect of the present invention, the plurality of electronic control devices, the operation management device, and the communication transmission line configure a communication network, and the communication network includes at least one transmission line switch that switches connection in the communication transmission line, the activation management unit manages a network configuration that indicates a state to be set for the transmission line switch in the communication network, the activation management unit notifies an update network configuration to the activation unit, the update network configuration being the network configuration for establishing communication between the update management unit and the target device, and the activation unit switches the transmission line switch according to the update network configuration, and then activates the electronic control device needing to be activated, according to the update activation configuration.
According to yet another aspect of the present invention, when the target device ends writing of the updated data, the update management unit prohibits the failure diagnosis unit from executing the failure diagnosis, the activation management unit notifies, to the activation unit, the network configuration used before notifying the update network configuration to the activation unit, and the activation unit switches the transmission line switch according to the network configuration notified from the activation management unit.
Yet another aspect of the present invention is an operation management method to be performed by a computer of an operation management device, the operation management device managing operation of a plurality of electronic control devices installed on a vehicle, the method including: a step of receiving a download instruction to download updated data from an external device outside the vehicle, the updated data including an updated program for an electronic control device, the electronic control device being at least one of the electronic control devices; a step of prohibiting execution of failure diagnosis for the electronic control devices; and a step of delivering the received updated data to the electronic control device and instructing the electronic control device to write the updated data, the electronic control device being a target device for downloading the updated data.
According to an aspect of the present invention, it is possible to prevent detection of unnecessary operational abnormality in the in-vehicle electronic control devices to prevent generation of unnecessary power consumption in downloading updated data to the electronic control devices, thereby leading to efficient downloading.
BRIEF DESCRIPTION OF THE DRAWINGS
FIG. 1 is a diagram showing a configuration of an in-vehicle communication network including an operation management device according to an embodiment of the present invention;
FIG. 2 is a diagram showing a configuration of the operation management device; and
FIG. 3 is a flowchart showing an operation procedure of the operation management device.
 DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS
The following describes embodiments of the present invention with reference to drawings.
FIG. 1 is a diagram showing a configuration of a communication network 3 installed on a vehicle 1, including an operation management device 2 according to one embodiment of the present invention. The communication network 3 includes a plurality of electronic control devices 4 a, 4 b, 4 c, 4 d, 4 e, 4 f, 4 g, 4 h, and 4 i, and a transmission line switch 6 (also referred to as a transmission line SW6) in addition to the operation management device 2. Hereinafter, the electronic control devices 4 a, 4 b, 4 c, 4 d, 4 e, 4 f, 4 g, 4 h, and 4 i are collectively referred to as the electronic control devices 4 as well.
The transmission line switch 6 switches connection in a communication transmission line 5 according to instructions from the operation management device 2.
The communication network 3 also includes communication transmission lines 5 a, 5 b, 5 c, 5 d, 5 e, 5 f, 5 g, 5 h, 5 j, 5 k, and 5 m. Hereinafter, the communication transmission lines 5 a, 5 b, 5 c, 5 d, 5 e, 5 f, 5 g, 5 h, 5 j, 5 k, and 5 m are collectively referred to as a communication transmission line 5. In the communication network 3, each of the plurality of electronic control devices 4 is directly connected to the operation management device via the communication transmission line 5 to be able to communicate with each other, or each of the devices is indirectly connected to the operation management device 2 via the communication transmission line 5 and any of the other electronic control devices 4 to be able to communicate with each other.
The operation management device 2 manages the operation of the plurality of electronic control devices 4 installed on the vehicle 1.
FIG. 2 is a diagram showing the configuration of the operation management device 2. The operation management device 2 includes a processor 10, a memory 11, and a communicator 12. The memory 11 is composed of, for example, a volatile and/or non-volatile semiconductor memory. The communicator 12 is a transceiver (transmitter/receiver, circuit) for the operation management device 2 to communicate with the electronic control devices 4 and the transmission line switch 6 via the communication transmission line 5.
The processor 10 is, for example, a computer including a central processing unit (CPU), and the like. The processor 10 may have a configuration including a read only memory (ROM) in which a program is written, a random access memory (RAM) for temporarily storing data, and the like. The processor 10 includes an update management unit 13, a failure diagnosis unit 14, an activation management unit 15, and an activation unit 16, as functional elements or functional units.
These functional elements included in the processor 10 are implemented, for example, by the processor 10, which is a computer, executing a management program 17 stored in the memory 11. The management program 17 can be stored in any computer-readable storage medium. Alternatively, all or part of the functional elements of the processor 10 may be configured with hardware including one or more electronic circuit components.
The update management unit 13 receives a download instruction to download updated data, which includes an updated program for at least one electronic control device 4, from an external device (e.g. server) outside the vehicle 1. When receiving a download instruction from an external device, the update management unit 13 turns on the power of the vehicle 1, delivers the received updated data to the electronic control device 4 that is a target device for downloading the updated data, and instructs the device 4 to write the updated data.
In particular, in this embodiment, when the update management unit 13 instructs any of the electronic control devices 4 to write updated data, the update management unit 13 prohibits the failure diagnosis unit 14, which will be described later, from executing failure diagnosis. This makes it possible to prevent the electronic control devices 4 from detecting unnecessary operational abnormality and from consuming unnecessary power in downloading the updated data to the electronic control device 4, thereby leading to the efficient downloading.
The update management unit 13 prohibits execution of the diagnostic operation, and then notifies target information indicating the download target device to the activation management unit 15, which will be described later, based on the download instruction.
When the writing of the updated data ends in the electronic control device 4 that is the target device, in other words, when the update management unit 13 receives an end notification (to be described later) from the electronic control device 4 that is the target device, the update management unit 13 prohibits the failure diagnosis unit 14 from executing failure diagnosis.
The failure diagnosis unit 14 executes failure diagnosis for the electronic control devices 4 when the power of the vehicle 1 is turned on or off.
However, the failure diagnosis unit 14 does not execute failure diagnosis for the electronic control devices 4 when the failure diagnosis unit 14 is prohibited from executing failure diagnosis by the update management unit 13.
When the activation unit 16 activates the electronic control devices 4 according to the update activation configuration, in a state in which the failure diagnosis unit 14 is prohibited from executing failure diagnosis by the update management unit 13, the failure diagnosis unit 14 executes failure diagnosis for the electronic control devices 4, which are indicated in the update activation configuration, after the activation.
The electronic control device 4 that is the target device writes the updated data after the execution of the failure diagnosis. The electronic control device 4 that is the target device transmits an end notification to the operation management device 2 when the device 4 ends the writing of the updated data.
When the communicator 12 receives the end notification from the electronic control device 4 that is the target device, in a state in which the failure diagnosis unit 14 is prohibited from executing the failure diagnosis by the update management unit 13, the failure diagnosis unit 14 does not executes failure diagnosis for the electronic control devices 4. When the failure diagnosis unit 14 is prohibited from executing failure diagnosis upon receiving the end notification and then receives a switching completion notification (to be described later) from the activation unit 16, the failure diagnosis unit 14 executes the failure diagnosis for the electronic control devices 4 according to a normal (e.g. default) sequence and then turns off the power of the vehicle 1.
The activation management unit 15 manages a network configuration that indicates a state to be set for the transmission line switch 6 in the communication network 3. Based on the target information notified from the update management unit 13, the activation management unit 15 notifies, to the activation unit 16, an update network configuration that is a network configuration for establishing communication between the update management unit 13 and the target device. This allows the activation management unit 15, with the update network configuration, to inform the activation unit 16 of a state of the transmission line switch 6 that can most efficiently establish communication between the update management unit 13 and the target device in downloading updated data to the electronic control device 4.
Here, the “state of the transmission line switch 6 that can most efficiently establish communication between the update management unit 13 and the target device” may be, for example, such a state of the transmission line switch 6 that minimizes the number of other electronic control devices 4 through which updated data passes from the operation management device 2 to the electronic control device 4 that is the target device. Specifically, for example, in a case in which the transmission line switch 6 is set to connect the communication transmission lines 5 a and 5 b as a default setting state, the update network configuration can specify the communication transmission lines 5 a and 5 g to be connected when the updated data is downloaded with the electronic control device 4 e as the target device. As a result, the updated data can start from the operation management device 2 and reach the electronic control device 4 e that is the target device, without passing through other electronic control devices 4.
Also, the activation management unit 15 manages the activation configuration, which is information indicating the activation order of the plurality of electronic control devices 4. In this embodiment, based on the target information notified from the update management unit 13, the activation management unit 15 refers to the update network configuration, and notifies, to the activation unit 16, the electronic control device 4 needing to be activated to establish communication between the update management unit 13 and the target device, and the update activation configuration, which is the activation configuration indicating the order of activation of those electronic control devices 4. As a result, the activation unit 16 activates no unnecessary electronic control device 4, and therefore, generates no unnecessary power consumption. This makes it possible to efficiently activate the electronic control device 4 necessary for delivering updated data to the electronic control device 4 that is the target device.
When the writing of the updated data ends in the electronic control device 4 that is the target device, in other words, when the activation management unit 15 receives the end notification from the electronic control device 4 that is the target device, the activation management unit 15 notifies, to the activation unit, the network configuration used before notifying the update network configuration to the activation unit 16.
The activation unit 16 activates the electronic control devices 4. In this embodiment, the activation unit 16 switches the transmission line switch 6 according to the update network configuration notified from the activation management unit 15, and then sequentially activates the electronic control devices 4 that need to be activated according to the update activation configuration.
When the activation unit 16 completes activation of all the electronic control devices 4 that need to be activated, the activation unit 16 notifies this completion to the failure diagnosis unit 14.
When the writing of the updated data ends in the electronic control device 4 that is the target device, in other words, when the activation unit 16 receives the end notification from the electronic control device 4 that is the target device, the activation unit 16 switches the transmission line switch 6 according to the network configuration notified from the activation management unit 15 thereafter. The activation unit 16 also activates all the electronic control devices 4. The activation unit 16 then transmits a switching completion notification to the failure diagnosis unit 14.
As a result, when the activation unit 16 switches the transmission line switch 6 to change the network configuration of the communication network 3 to a state different from the normal state in downloading the updated data, the activation unit 16 can restore the configuration to the original network configuration when the vehicle 1 is powered off. Therefore, when the vehicle 1 is powered off, the failure diagnosis unit 14 can perform failure diagnosis according to a normal sequence. As described above, the activation unit 16 restores the configuration to the previous network configuration when the vehicle 1 is powered off. This makes it possible to activate the electronic control devices 4 according to the normal activation sequence in the vehicle 1 when the vehicle 1 is powered on next time, and to activate the vehicle 1 with responsiveness maintained.
Next, the operation procedure of the operation management device 2 will be described. FIG. 3 is a flowchart showing the procedure of processing in the operation management device 2. The processing in FIG. 3 is repeatedly executed.
When the processing starts, the update management unit 13 determines whether an updated data download instruction has been received from an external device outside the vehicle 1 (S100). If the download instruction has not been received (S100, NO), the update management unit 13 returns to step 100, repeats the processing, and waits for the download instruction to be received.
In contrast, when the download instruction has been received (S100, YES), the update management unit 13 prohibits the failure diagnosis unit 14 from executing failure diagnosis for the electronic control devices 4 (S102), and then turns on the power of the vehicle 1 (S104). The update management unit 13 also notifies, to the activation management unit 15, target information indicating the electronic control device 4 that is the target device for downloading the updated data. Based on the target information, the activation management unit 15 notifies, to the activation unit 16, the update network configuration and the update activation configuration for establishing communication between the update management unit 13 and the target device (S106).
The activation unit 16 switches the transmission line switch 6 based on the update network configuration (S108), and then sequentially activates the electronic control devices 4 based on the update activation configuration (S110). In parallel with the executing the activation, the activation unit 16 passes the update activation configuration to the failure diagnosis unit. Subsequently, the failure diagnosis unit 14 executes failure diagnosis for the electronic control device 4 indicated in the update activation configuration (S112).
Next, the update management unit 13 delivers the received updated data to the electronic control device 4 that is the target device for downloading the updated data, and instructs the device 4 to write the updated data (S114). The update management unit 13 also determines whether writing of the updated data has been completed in the electronic control device 4 that is the target device (S116). If the writing of the updated data has not been completed (S116, NO), the update management unit 13 repeats the processing of step S116 and waits for the writing of the updated data to be completed.
In contrast, when the writing of the updated data has been completed (S116, YES), the update management unit 13 prohibits the failure diagnosis unit 14 from executing failure diagnosis (S118). The activation management unit 15 also notifies, to the activation unit 16, the previous network configuration used before notifying the update network configuration to the activation unit 16 (S120). The activation unit 16 switches the transmission line switch 6 according to the previous network configuration notified from the activation management unit 15 (S122). Subsequently, the failure diagnosis unit 14 executes failure diagnosis for the electronic control devices 4 according to a normal sequence (S124), and then turns off the power of the vehicle 1 (S126), ending this processing.
Note that the present invention is not limited to the configurations of the above-described embodiments, and can be implemented in various aspects without departing from the spirit of the present invention.
The above-described embodiments support the following configurations.
(Configuration 1) An operation management device for managing operation of a plurality of electronic control devices installed on a vehicle, the operation management device including: an update management unit configured to: receive a download instruction to download updated data from an external device outside the vehicle; and deliver the received updated data to an electronic control device and instruct the electronic control device to write the updated data, the updated data including an updated program for the electronic control device, the electronic control device being at least one of the electronic control devices, the electronic control device being a target device for downloading the updated data; and a failure diagnosis unit configured to execute failure diagnosis for the electronic control devices, wherein when the update management unit instructs any of the electronic control devices to write the updated data, the update management unit prohibits the failure diagnosis unit from executing the failure diagnosis.
The operation management device of configuration 1 makes it possible to prevent detection of unnecessary operational abnormality in the electronic control device to prevent generation of unnecessary power consumption in downloading updated data to the electronic control device, thereby leading to efficient downloading.
(Configuration 2) The operation management device according to configuration 1, each of the plurality of electronic control devices being connected to the operation management device either directly through a communication transmission line to be able to communicate with each other or indirectly through the communication transmission line and at least one of the electronic control devices other than the electronic control device to be able to communicate with each other, the operation management device further including: an activation management unit configured to manage an activation configuration, the activation configuration being information indicating an activation order of the plurality of electronic control devices; and an activation unit configured to activate the electronic control devices, wherein the update management unit prohibits execution of diagnostic operation and then notifies the target device to the activation management unit based on the download instruction, the activation management unit notifies an electronic control device and an update activation configuration to the activation unit, the electronic control device being at least one of the electronic control devices, the electronic control device needing to be activated to establish communication between the update management unit and the target device, the update activation configuration being the activation configuration indicating an activation order, and the activation unit activates the electronic control device needing to be activated, according to the update activation configuration.
The operation management device of configuration 2 allows the activation unit to activate no unnecessary electronic control devices, therefore to generate no unnecessary power consumption, and to efficiently activate the electronic control device necessary for delivering updated data to the electronic control device that is the target device.
(Configuration 3) The operation management device according to configuration 2, wherein the failure diagnosis unit executes failure diagnosis for the electronic control device indicated in the update activation configuration after the activation unit activates the electronic control device according to the update activation configuration.
The operation management device of configuration 3 allows the failure diagnosis unit to execute failure diagnosis for the electronic control device that has been actually activated, thereby preventing detection of unnecessary operational abnormality and generation of unnecessary power consumption.
(Configuration 4) The operation management device according to configuration 3, wherein the plurality of electronic control devices, the operation management device, and the communication transmission line configure a communication network, and the communication network includes at least one transmission line switch that switches connection in the communication transmission line, the activation management unit manages a network configuration that indicates a state to be set for the transmission line switch in the communication network, the activation management unit notifies an update network configuration to the activation unit, the update network configuration being the network configuration for establishing communication between the update management unit and the target device, and the activation unit switches the transmission line switch according to the update network configuration, and then activates the electronic control device needing to be activated, according to the update activation configuration.
The operation management device of configuration 4 allows the activation management unit to cause the activation unit to implement, for example, the state of the transmission line switch 6 in which the update network configuration can establish communication between the update management unit 13 and the target device most efficiently, thereby executing download further efficiently.
(Configuration 5) The operation management device according to configuration 4, wherein when the target device ends writing of the updated data, the update management unit prohibits the failure diagnosis unit from executing the failure diagnosis, the activation management unit notifies, to the activation unit, the network configuration used before notifying the update network configuration to the activation unit, and the activation unit switches the transmission line switch according to the network configuration notified from the activation management unit.
The operation management device of configuration 5 restores the configuration to the previous network configuration when the vehicle 1 is powered off. This makes it possible to activate the electronic control devices 4 according to a normal activation sequence in the vehicle 1 when the vehicle 1 is powered on next time and to activate the vehicle 1 with the responsiveness maintained.
(Configuration 6) An operation management method to be performed by a computer of an operation management device, the operation management device managing operation of a plurality of electronic control devices installed on a vehicle, the method including: a step of receiving a download instruction to download updated data from an external device outside the vehicle, the updated data including an updated program for an electronic control device, the electronic control device being at least one of the electronic control devices; a step of prohibiting execution of failure diagnosis for the electronic control devices; and a step of delivering the received updated data to the electronic control device and instructing the electronic control device to write the updated data, the electronic control device being a target device for downloading the updated data.
The operation management method of configuration 6 makes it possible to prevent detection of unnecessary operational abnormality in the electronic control device to prevent generation of unnecessary power consumption in downloading updated data to the electronic control device, thereby leading to efficient downloading.
REFERENCE SIGNS LIST
    • 1 . . . vehicle, 2 . . . operation management device, 3 . . . communication network, 4, 4 a, 4 b, 4 c, 4 d, 4 e, 4 f, 4 g, 4 h, 4 i . . . electronic control device, 5, 5 a, 5 b, 5 c, 5 d, 5 e, 5 f, 5 g, 5 h, 5 i, 5 j, 5 k, 5 m . . . communication transmission line, 6 . . . transmission line switch, 10 . . . processor, 11 . . . memory, 12 . . . communicator, 13 . . . update management unit, 14 . . . failure diagnosis unit, 15 . . . activation management unit, 16 . . . activation unit, 17 . . . management program

Claims (6)

What is claimed is:
1. An operation management device for managing operation of a plurality of electronic control devices installed on a vehicle, the operation management device comprising a processor that includes:
an update management unit configured to: receive a download instruction to download updated data from an external device outside the vehicle; and deliver the downloaded updated data to an electronic control device and instruct the electronic control device to write the updated data, the updated data including an updated program for the electronic control device, the electronic control device being at least one of the plurality of electronic control devices, the electronic control device being a target device for downloading the updated data; and
a failure diagnosis unit configured to execute failure diagnosis for the plurality of electronic control devices,
wherein when the update management unit instructs any of the plurality of electronic control devices to write the updated data, the update management unit prohibits the failure diagnosis unit from executing the failure diagnosis.
2. The operation management device according to claim 1, each of the plurality of electronic control devices being connected to the operation management device either directly through a communication transmission line to be able to communicate with each other or being connected indirectly through the communication transmission line and to at least one of the plurality of electronic control devices other than the electronic control device to be able to communicate with each other, the processor of the operation management device further including:
an activation management unit configured to manage an activation configuration, the activation configuration being information indicating an activation order of the plurality of electronic control devices; and
an activation unit configured to activate the plurality of electronic control devices,
wherein the update management unit prohibits execution of diagnostic operation and then notifies the target device to the activation management unit based on the download instruction,
the activation management unit notifies an electronic control device and an update activation configuration to the activation unit, the electronic control device notified to the activation unit being at least one of the plurality of electronic control devices and needing to be activated to establish communication between the update management unit and the target device, the update activation configuration being the activation configuration indicating an activation order, and
the activation unit activates the electronic control device needing to be activated, according to the update activation configuration.
3. The operation management device according to claim 2, wherein
the failure diagnosis unit executes failure diagnosis for an electronic control device indicated in the update activation configuration after the activation unit activates the electronic control device indicated in the update activation configuration according to the update activation configuration.
4. The operation management device according to claim 3, wherein
the plurality of electronic control devices, the operation management device, and the communication transmission line configure a communication network, and the communication network includes at least one transmission line switch that switches connection in the communication transmission line,
the activation management unit manages a network configuration that indicates a state to be set for the transmission line switch in the communication network,
the activation management unit notifies an update network configuration to the activation unit, the update network configuration being a network configuration for establishing communication between the update management unit and the target device, and
the activation unit switches the transmission line switch according to the update network configuration, and then activates the electronic control device needing to be activated, according to the update activation configuration.
5. The operation management device according to claim 4, wherein
when the target device ends writing of the updated data,
the update management unit prohibits the failure diagnosis unit from executing the failure diagnosis,
the activation management unit notifies, to the activation unit, a network configuration used before notifying the update network configuration to the activation unit, and
the activation unit switches the transmission line switch according to the update network configuration notified from the activation management unit.
6. An operation management method to be performed by a computer of an operation management device, the operation management device managing operation of a plurality of electronic control devices installed on a vehicle, the method comprising:
an update management step of receiving a download instruction to download updated data from an external device outside the vehicle,
and
delivering the downloaded updated data to the electronic control device and instructing the electronic control device to write the updated data, the updated data including an updated program for the electronic control device, the electronic control device being at least one of the plurality of electronic control devices, the electronic control device being a target device for downloading the updated data; and
a failure diagnosis step of, when not prohibited, executing failure diagnosis for the plurality of electronic control devices,
wherein when, in the update management step, any of the electronic control devices is instructed to write the updated data, the failure diagnosis step is prohibited from executing the failure diagnosis for the plurality of electronic control devices.
US18/153,551 2022-02-15 2023-01-12 Operation management device and operation management method Active 2043-03-25 US12175236B2 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2022021277A JP2023118359A (en) 2022-02-15 2022-02-15 Operation management device and operation management method
JP2022-021277 2022-02-15

Publications (2)

Publication Number Publication Date
US20230259353A1 US20230259353A1 (en) 2023-08-17
US12175236B2 true US12175236B2 (en) 2024-12-24

Family

ID=87558549

Family Applications (1)

Application Number Title Priority Date Filing Date
US18/153,551 Active 2043-03-25 US12175236B2 (en) 2022-02-15 2023-01-12 Operation management device and operation management method

Country Status (3)

Country Link
US (1) US12175236B2 (en)
JP (1) JP2023118359A (en)
CN (1) CN116610087A (en)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2008056190A (en) * 2006-09-04 2008-03-13 Nsk Ltd Vehicle control device
WO2012056773A1 (en) * 2010-10-29 2012-05-03 本田技研工業株式会社 Program rewriting system for vehicles
WO2017212772A1 (en) * 2016-06-09 2017-12-14 株式会社デンソー Vehicular device
WO2021039795A1 (en) 2019-08-28 2021-03-04 株式会社デンソー Vehicle electronic control system, vehicle master device, rewriting instruction method by writing back config information, and rewriting instruction program by writing back config information

Family Cites Families (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP4599952B2 (en) * 2004-09-15 2010-12-15 株式会社デンソー Program rewriting system and vehicle computer system
JP2007011734A (en) * 2005-06-30 2007-01-18 Denso Corp On-vehicle control unit
JP5206737B2 (en) * 2010-06-11 2013-06-12 株式会社デンソー Electronic control device and information management system
CN107531198B (en) * 2015-03-30 2020-04-03 本田技研工业株式会社 Program rewriting device and program rewriting method
CN110244966A (en) * 2019-06-18 2019-09-17 广东戈兰玛汽车系统有限公司 A kind of BOOTLOADER program online updating method based on UDS
JP7294217B2 (en) * 2020-04-03 2023-06-20 トヨタ自動車株式会社 Vehicle program update system
JP7359096B2 (en) * 2020-07-27 2023-10-11 トヨタ自動車株式会社 Vehicle control device

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2008056190A (en) * 2006-09-04 2008-03-13 Nsk Ltd Vehicle control device
WO2012056773A1 (en) * 2010-10-29 2012-05-03 本田技研工業株式会社 Program rewriting system for vehicles
WO2017212772A1 (en) * 2016-06-09 2017-12-14 株式会社デンソー Vehicular device
WO2021039795A1 (en) 2019-08-28 2021-03-04 株式会社デンソー Vehicle electronic control system, vehicle master device, rewriting instruction method by writing back config information, and rewriting instruction program by writing back config information

Non-Patent Citations (3)

* Cited by examiner, † Cited by third party
Title
Li, Yang, et al., Fault Diagnosis of Automobile ECUs with data mining Technologies, Applied Mechanics and Materials, 2011, 6 pages, [retrieved on Oct. 7, 2024], Retrieved from the Internet: <URL:https://www.scientific.net/AMM.40-41.156.pdf>. *
Liang, Hengyi, et al., Addressing Extensibility and Fault Tolerance in CAN-based Automotive Systems, NOCS '17: Proceedings of the Eleventh IEEE/ACM International Symposium on Networks-on-Chip, 2017, 8 pages, [retrieved on Oct. 7, 2024], Retrieved from the Internet: <URL:http://dl.acm.org/>. *
Mansour, Karim, et al., AiroDiag: A sophisticated tool that diagnoses and updates vehicles software over air, 2012 IEEE International Electric Vehicle Conference, 2012, 7 pages, [retrieved on Oct. 7, 2024], Retrieved from the Internet: <URL:http://ieeexplore.ieee.org/>. *

Also Published As

Publication number Publication date
US20230259353A1 (en) 2023-08-17
CN116610087A (en) 2023-08-18
JP2023118359A (en) 2023-08-25

Similar Documents

Publication Publication Date Title
US12032946B2 (en) Program update system, program transmission device, and program transmission method
US8122447B2 (en) Firmware installation
US7793283B2 (en) Communication terminal software updating method, communication terminal, and software updating method
CN110244961A (en) Vehicle control system and method for confirming software conformance
WO2017149825A1 (en) Program update system, program update method, and computer program
US11498497B2 (en) Communication device and control method
US8161202B2 (en) Peripheral device management system
US12050903B2 (en) OTA master, system, method, non-transitory storage medium, and vehicle
US12461732B2 (en) Ota master, system, method, non-transitory storage medium, and vehicle
JP2018132957A (en) Control unit and control program updating method
EP2300929A2 (en) System and method for safely updating thin client operating system over a network
US12248774B2 (en) Ota master, center, system, update method, and vehicle
JP2017045318A (en) Electronic apparatus
CN106095474A (en) For the method and apparatus updating the software in means of transport
EP3923139B1 (en) Electronic control device and method for using non-volatile memory
JPH08249163A (en) Network system software version control device
US12175236B2 (en) Operation management device and operation management method
US20220405082A1 (en) Center, ota master, system, method, non-transitory storage medium, and vehicle
US20250231759A1 (en) In-vehicle apparatus, computer program, and program updating method
KR101900729B1 (en) Method for running PLC operating system
US20030182521A1 (en) Program data rewriting system
CN115298064B (en) Software updating device, software updating method and software updating processing program
JPH10187454A (en) Bios reloading system
JP2007172096A (en) Information processing apparatus and activation control method thereof
JP7713344B2 (en) In-vehicle device and program update system

Legal Events

Date Code Title Description
AS Assignment

Owner name: HONDA MOTOR CO., LTD., JAPAN

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:NOMURA, TAKUMI;REEL/FRAME:062362/0321

Effective date: 20221209

FEPP Fee payment procedure

Free format text: ENTITY STATUS SET TO UNDISCOUNTED (ORIGINAL EVENT CODE: BIG.); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY

STPP Information on status: patent application and granting procedure in general

Free format text: DOCKETED NEW CASE - READY FOR EXAMINATION

STPP Information on status: patent application and granting procedure in general

Free format text: NON FINAL ACTION MAILED

STPP Information on status: patent application and granting procedure in general

Free format text: RESPONSE TO NON-FINAL OFFICE ACTION ENTERED AND FORWARDED TO EXAMINER

STPP Information on status: patent application and granting procedure in general

Free format text: NOTICE OF ALLOWANCE MAILED -- APPLICATION RECEIVED IN OFFICE OF PUBLICATIONS

STPP Information on status: patent application and granting procedure in general

Free format text: PUBLICATIONS -- ISSUE FEE PAYMENT VERIFIED

STCF Information on status: patent grant

Free format text: PATENTED CASE